$ rpki-client -vvf rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft File: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft (raw, json) Hash identifier: sVNdW7iKLuffHEW5LAfIHgrCBanfiY8httUn8NcnOjA= Subject key identifier: B4:FE:A3:69:35:FA:32:A0:46:95:58:22:F0:82:87:7A:E8:A6:54:6B Authority key identifier: 2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B Certificate issuer: /CN=A9165456/serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B Certificate serial: 09BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft Manifest number: 09AE Signing time: Thu 02 May 2024 20:57:18 +0000 Manifest this update: Thu 02 May 2024 20:57:17 +0000 Manifest next update: Thu 09 May 2024 20:57:17 +0000 Files and hashes: 1: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl (hash: MREBDvllJlAjorjPdI+tE0x0RvZKnvdztCIgjHiAb7o=) 2: 5ABD5A320D7A11EB9D346C48C4F9AE02.roa (hash: Y/AEd7QcGK8AQ/rzAT1eLLkzS1RzAMBe2UpxIF9eV6E=) 3: 5977CEE60D7A11EB9D346C48C4F9AE02.roa (hash: WKWrJLE2KjXqNoGts7dJxOjcA/A1JYYBqSWWc0aK44A=) 4: 5A15EA040D7A11EB9D346C48C4F9AE02.roa (hash: 9fqzd3vvP8c0S6SsCwgCIrhZmr97quNpOsKxeDvdK6A=) 5: 9A6A637EF48C11EBBDF92914C4F9AE02.roa (hash: 8v3U212scKLXksKa0eNaD2XPnjY3jXNcz+ZwlllZRK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2494 (0x9be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165456/serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B Validity Not Before: May 2 20:57:17 2024 GMT Not After : May 9 20:57:17 2024 GMT Subject: CN=6633fe2d-c316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4f:a7:45:aa:90:72:17:8f:22:4c:29:97:71: aa:bf:1f:86:61:0b:e0:36:62:61:fa:ea:e1:55:b3: 25:47:4b:dd:07:45:27:71:1e:14:71:f9:a8:d9:d9: d7:3d:05:dc:59:bf:81:f7:cb:ca:2d:06:18:81:8a: 90:c3:04:2a:03:bf:91:36:38:3f:f7:4e:2a:c0:3e: cf:bc:85:d8:07:27:6e:8a:9c:a5:1b:de:b6:d9:be: 6c:01:67:f0:98:dc:ad:0e:e7:24:82:19:f4:12:c8: 6a:a0:7e:cf:2c:f8:ea:ca:17:6e:b4:ea:05:57:8d: 83:d1:e7:a3:26:59:ed:1a:38:27:5a:da:34:bc:9f: 63:eb:8f:41:e7:f7:62:7f:88:39:98:0f:aa:11:f5: 5d:50:2f:f3:6c:05:cf:ff:cb:e6:f9:1b:e2:73:99: 15:43:12:5e:07:c9:4f:91:27:c9:7a:36:cb:9f:be: a4:14:19:fc:8f:a1:68:5c:3d:08:1d:71:36:e9:ad: e9:9c:49:95:9a:e9:91:88:c3:e8:fe:3d:d6:6e:09: 8b:01:60:e3:78:aa:2e:33:ec:ce:e6:de:1b:5f:0c: 18:e8:65:9c:8f:53:20:f1:1f:ab:4c:82:7d:cf:ad: ff:4e:8b:27:d5:8c:7d:51:5c:29:93:83:5b:8a:54: 52:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FE:A3:69:35:FA:32:A0:46:95:58:22:F0:82:87:7A:E8:A6:54:6B X509v3 Authority Key Identifier: keyid:2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:c0:49:db:af:84:90:aa:4c:41:17:70:1d:21:27:cb:de:79: 5a:90:54:7c:35:25:81:02:a5:53:58:e2:f0:b1:52:b4:05:d4: bc:16:e3:19:52:bf:f7:03:8c:ad:1c:ed:18:1c:0d:8a:18:43: 16:c4:fd:5b:ed:c9:c5:9d:d7:04:ec:9c:b5:73:09:84:23:90: 78:8d:ab:1b:27:b4:8d:4f:d9:44:b9:b6:b7:54:d1:17:fc:99: 5c:59:ed:dc:40:d9:ce:f8:5f:2b:d4:72:77:de:34:e1:7a:7d: 71:a7:1e:b6:c4:cc:96:86:a8:32:c3:55:c0:e9:98:fd:83:97: 2c:5c:d5:ff:e9:43:ba:23:93:5b:b1:fe:91:28:36:62:cf:35: 05:ac:18:31:66:94:bf:4f:29:d5:39:4a:c7:a7:6b:ae:8e:17: 1d:4a:a3:f9:d6:e4:8c:55:59:62:41:6c:ac:0e:db:27:5d:ae: e6:48:f9:47:fc:47:0f:a8:6e:b5:c6:bf:7b:9c:66:48:90:e8: 26:e8:12:b6:50:d7:e1:5d:e9:14:45:4a:dd:31:69:0c:f4:f9: 07:b5:78:0e:30:40:9b:d2:bb:7d:7a:80:b0:79:99:fa:76:be: 5c:30:f7:cd:28:08:7e:22:e8:60:bb:c6:9b:3a:61:df:35:7e: e4:89:cf:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU0NTYxMTAvBgNVBAUTKDJDRTExMDA4RDJFMDNGRUIzRTYzN0FENEY3RTcyNzJF REM2MEQ1M0IwHhcNMjQwNTAyMjA1NzE3WhcNMjQwNTA5MjA1NzE3WjAYMRYwFAYD VQQDEw02NjMzZmUyZC1jMzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5k+nRaqQchePIkwpl3Gqvx+GYQvgNmJh+urhVbMlR0vdB0UncR4Ucfmo2dnX PQXcWb+B98vKLQYYgYqQwwQqA7+RNjg/904qwD7PvIXYByduipylG9622b5sAWfw mNytDuckghn0EshqoH7PLPjqyhdutOoFV42D0eejJlntGjgnWto0vJ9j649B5/di f4g5mA+qEfVdUC/zbAXP/8vm+Rvic5kVQxJeB8lPkSfJejbLn76kFBn8j6FoXD0I HXE26a3pnEmVmumRiMPo/j3WbgmLAWDjeKouM+zO5t4bXwwY6GWcj1Mg8R+rTIJ9 z63/Tosn1Yx9UVwpk4NbilRSPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLT+o2k1 +jKgRpVYIvCCh3roplRrMB8GA1UdIwQYMBaAFCzhEAjS4D/rPmN61PfnJy7cYNU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTQ1Ni8yMzc4RTA4MDVF RTUxMUVBQUE1MkRFNDdDNEY5QUUwMi9MT0VRQ05MZ1Atcy1ZM3JVOS1jbkx0eGcx VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xPRVFDTkxnUC1zLVkzclU5LWNuTHR4ZzFUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTQ1Ni8yMzc4RTA4MDVFRTUxMUVBQUE1MkRFNDdDNEY5QUUwMi9MT0VRQ05MZ1At cy1ZM3JVOS1jbkx0eGcxVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDwEnbr4SQqkxBF3AdISfL3nlakFR8NSWBAqVTWOLwsVK0BdS8FuMZ Ur/3A4ytHO0YHA2KGEMWxP1b7cnFndcE7Jy1cwmEI5B4jasbJ7SNT9lEuba3VNEX /JlcWe3cQNnO+F8r1HJ33jThen1xpx62xMyWhqgyw1XA6Zj9g5csXNX/6UO6I5Nb sf6RKDZizzUFrBgxZpS/TynVOUrHp2uujhcdSqP51uSMVVliQWysDtsnXa7mSPlH /EcPqG61xr97nGZIkOgm6BK2UNfhXekURUrdMWkM9PkHtXgOMECb0rt9eoCweZn6 dr5cMPfNKAh+Iuhgu8abOmHfNX7kic+p -----END CERTIFICATE-----Generated at Thu May 2 22:13:17 2024 by rpki-client on console-fra.rpki-client.org